Opexa Advisory

Opexa Advisory is a cybersecurity company based in Frankfurt am Main, Germany working in grc & compliance, penetration testing, offensive security +3 more.

Opexa Advisory is a German information security consultancy focused on mid-sized companies (KMU) in the DACH region. The firm advises on ISO/IEC 27001 implementation and certification readiness, TISAX assessment preparation for automotive supply chains, and NIS2 and DORA compliance, including gap analyses, risk assessments, and audit preparation. Its services also cover ISO 27018 for cloud data protection, ISO 42001 for AI management systems, and the EU Cyber Resilience Act. Additional offerings include penetration testing, incident management support, business continuity management, bug bounty program setup, cyber insurance advisory, and a virtual CISO service (CISOaaS). The company also runs an academy offering information security training and publishes podcasts and webinars. It positions itself as an independent, owner-managed consultancy that works on information security exclusively rather than as a generalist compliance provider.